This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier: bjfYczIGuyd5JzhKhEwjMH+4k25ymY3EvIlFaCBGfyo=
Subject key identifier: 88:A5:CE:AB:1A:52:17:7E:77:EA:F2:03:33:C8:90:73:12:D0:01:C8
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial: 5E2A967974FE39907F790EEFD93DCFB9F40459E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number: 0815
Signing time: Sat 24 Jan 2026 23:32:54 +0000
Manifest this update: Sat 24 Jan 2026 23:27:54 +0000
Manifest next update: Mon 26 Jan 2026 00:54:54 +0000
Files and hashes: 1: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=)
2: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=)
3: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=)
4: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=)
5: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=)
6: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=)
7: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=)
8: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=)
9: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=)
10: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=)
11: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=)
12: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: 4/Np8fAFmNHqFOnq8n3jU7/BFAdB2QkLq2Fyv5hc2e4=)
13: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=)
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 00:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:2a:96:79:74:fe:39:90:7f:79:0e:ef:d9:3d:cf:b9:f4:04:59:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Validity
Not Before: Jan 24 23:27:54 2026 GMT
Not After : Jan 26 00:54:54 2026 GMT
Subject: CN=88A5CEAB1A52177E77EAF20333C8907312D001C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:97:04:70:c2:00:72:0b:18:10:3c:2b:1b:
a3:f7:05:a3:30:9d:eb:5d:aa:79:97:32:b5:56:5c:
c9:a2:39:0b:e6:38:53:8f:42:1b:9a:82:73:8b:bb:
f5:e3:9b:ad:f1:bb:90:f5:17:23:d6:ac:64:50:63:
0f:07:0e:6e:ef:46:51:2a:26:b8:42:4a:44:63:24:
fe:df:a5:d5:62:9a:95:34:d2:b7:44:d9:23:79:38:
df:36:7e:78:63:5d:8a:50:ae:f7:94:f2:88:d1:8d:
c6:86:a5:56:ad:df:68:67:ca:7e:00:57:f1:98:57:
8a:01:6c:0b:2b:c3:1e:51:13:0b:bb:d5:f0:54:72:
62:94:09:e1:3d:a3:9e:28:ba:e3:ad:41:02:ef:a6:
f8:c0:33:a2:19:a4:a3:6e:65:ef:2c:54:7b:9f:45:
4c:78:4b:e2:8e:a1:28:9d:ae:3d:5b:d1:c3:61:7d:
74:55:ec:e5:02:3f:4f:f2:4f:34:2e:e2:51:9d:71:
36:52:e1:50:52:05:3a:e5:c2:24:8c:82:d6:1e:11:
5a:5a:18:96:43:33:71:63:04:76:f7:8c:3c:dd:7f:
a2:e9:ec:3e:05:c9:e5:5c:ab:cd:a4:87:7a:8e:7f:
e8:06:5d:fa:1f:b8:40:73:91:ad:8e:a5:27:cf:c8:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A5:CE:AB:1A:52:17:7E:77:EA:F2:03:33:C8:90:73:12:D0:01:C8
X509v3 Authority Key Identifier:
keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a1:1a:26:51:a0:ef:32:ad:38:bc:d0:c9:d0:47:8f:9e:43:
18:95:1d:df:e2:d2:74:54:f8:b4:ad:2b:f2:31:47:62:99:0f:
05:cc:04:93:00:cc:58:79:56:25:d7:9b:71:80:b8:7b:31:ab:
ec:e6:84:91:62:a0:99:90:d1:8f:e1:6d:ae:82:02:dd:5a:25:
cb:0d:ab:7d:d8:8d:6e:32:fb:b3:04:f9:e8:49:c3:f9:9e:b6:
b0:8e:e0:b1:a7:2c:75:8e:e2:36:21:08:3e:72:91:04:7c:e2:
58:85:0b:51:3f:64:35:69:cc:ae:bd:df:19:b3:31:ae:3c:61:
ee:08:65:39:f7:8c:db:ac:eb:d8:79:ce:1a:72:18:d5:9a:9e:
66:04:83:cf:10:d4:9b:ed:8c:4d:86:29:4d:a4:c6:34:58:96:
08:0f:d3:e3:88:88:f6:b9:d8:63:89:bb:15:ef:08:19:68:ec:
65:f6:68:c4:0a:94:5f:c3:69:9c:ae:07:df:f2:ed:ce:b7:1d:
d4:6d:e9:d4:90:dc:68:00:e7:30:2d:07:95:80:e6:2c:21:86:
b8:de:2d:76:8c:bb:12:34:3c:53:4a:25:16:db:f1:ad:57:95:
bc:d4:4a:e8:05:14:29:78:27:82:1e:8a:65:fb:38:31:f3:a0:
6b:07:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:33:38 2026 by rpki-client